Test ID:	1.3.6.1.4.1.25623.1.0.100951
Category:	General
Title:	Visionsoft Audit Multiple Vulnerabilities
Summary:	Visionsoft Audit is prone to multiple vulnerabilities.
Description:	Summary: Visionsoft Audit is prone to multiple vulnerabilities. Vulnerability Insight: The Visionsoft Audit on Demand service may be vulnerable to multiple issues which can be exploited remotely without authentication: - Heap overflow via LOG command (CVE-2007-4148) - Multiple arbitrary file overwrites via LOG and SETTINGSFILE command (CVE-2007-4149) - Denial of service via UNINSTALL command (CVE-2007-4149) Additionally, the underlying protocol for authentication has been reported as being vulnerable to replay attacks (CVE-2007-4152) and the settings file is typically installed with inappropriate permissions (CVE-2007-4150). Solution: We recommend that Visionsoft are contacted for a patch. To mitigate this flaw filter inbound traffic to 5957/tcp to only known management hosts. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-4148 BugTraq ID: 25153 http://www.securityfocus.com/bid/25153 http://www.portcullis.co.uk/uplds/advisories/vaheapoverflow%20-%2006_040.txt http://osvdb.org/46977 Common Vulnerability Exposure (CVE) ID: CVE-2007-4149 http://www.portcullis.co.uk/uplds/advisories/vafileover-06-039.txt http://www.portcullis.co.uk/uplds/advisories/vainifileoverwrite%20-%2006_041.txt http://www.portcullis.co.uk/uplds/advisories/vauninstall%2006_045.txt http://osvdb.org/42462 Common Vulnerability Exposure (CVE) ID: CVE-2007-4150 http://www.portcullis.co.uk/uplds/advisories/vapassword%20-%2006-042.txt http://osvdb.org/46979 Common Vulnerability Exposure (CVE) ID: CVE-2007-4151 http://www.portcullis.co.uk/uplds/advisories/vapathdisclosure%2006-043.txt http://www.portcullis.co.uk/uplds/advisories/vaversiondisclosure%2006_046.txt http://osvdb.org/46981 http://osvdb.org/46982 http://osvdb.org/46983 Common Vulnerability Exposure (CVE) ID: CVE-2007-4152 http://www.portcullis.co.uk/uplds/advisories/vareplay%2006_044.txt http://osvdb.org/46980
Copyright	Copyright (C) 2009 Tim Brown

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.